Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A502CCBC756B11F1B8C78A1ECF1D38B0.roa
File: A502CCBC756B11F1B8C78A1ECF1D38B0.roa (raw, json)
Hash identifier: jVTrBPm6CLe6OPFW8GBpv/e2sSd/ncdAWQd6378CuBE=
Subject key identifier: F7:84:F6:B1:06:85:26:A1:4E:21:68:F8:26:71:8C:EA:E1:32:F0:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C21A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A502CCBC756B11F1B8C78A1ECF1D38B0.roa
Signing time: Wed 01 Jul 2026 16:41:02 +0000
ROA not before: Wed 01 Jul 2026 16:40:56 +0000
ROA not after: Sat 01 Aug 2026 16:40:56 +0000
asID: 32043
IP address blocks: 156.230.16.0/22 maxlen: 24
156.230.52.0/22 maxlen: 24
156.230.134.0/23 maxlen: 24
156.232.2.0/23 maxlen: 24
156.232.48.0/21 maxlen: 24
156.249.189.0/24 maxlen: 24
156.249.194.0/24 maxlen: 24
156.249.195.0/24 maxlen: 24
156.249.200.0/24 maxlen: 24
156.249.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115226 (0x1c21a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 16:40:56 2026 GMT
Not After : Aug 1 16:40:56 2026 GMT
Subject: CN=6a45431e-557e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3c:f1:85:97:53:05:e2:e5:c7:71:0e:04:62:
62:8e:f3:2d:87:32:60:70:af:dd:68:0e:be:6f:41:
fc:48:e9:b1:bb:73:78:6d:6f:7d:0c:5b:fa:20:ad:
8a:45:72:d3:65:ef:f8:84:46:c2:b1:c8:c0:7e:74:
73:56:2b:17:56:67:e8:24:ba:a5:a3:a4:24:a3:9e:
64:f9:4a:30:fb:56:a3:45:57:15:a7:a7:d7:4f:26:
97:8a:50:4b:a8:ef:20:a5:16:cd:f8:9b:d6:8a:3d:
e0:35:62:bb:50:a0:71:e4:05:2b:60:54:be:27:5d:
88:68:54:ed:5c:5f:1c:b8:0e:aa:2c:76:0b:de:be:
64:4b:5f:9d:c5:a0:e3:c6:a9:93:01:54:6f:de:76:
d3:f8:14:f1:7e:03:81:48:ed:a2:dd:cc:f7:1d:f7:
76:e3:f1:94:c2:8d:59:92:1e:4e:61:7a:c8:de:55:
cd:57:53:e0:f6:be:01:19:a4:04:57:22:eb:57:71:
80:80:3b:bf:d4:51:2c:f5:7f:b6:2e:22:bc:f5:ba:
6d:22:b7:b3:d8:7c:41:74:2d:0a:34:4f:8e:ad:e1:
2a:86:c6:68:64:65:e4:44:ff:8a:9c:0f:6c:de:22:
85:f0:5a:87:e9:58:45:02:6b:8c:56:a8:73:59:35:
df:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:84:F6:B1:06:85:26:A1:4E:21:68:F8:26:71:8C:EA:E1:32:F0:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A502CCBC756B11F1B8C78A1ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.16.0/22
156.230.52.0/22
156.230.134.0/23
156.232.2.0/23
156.232.48.0/21
156.249.189.0/24
156.249.194.0/23
156.249.200.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:0b:a8:9c:51:21:f9:6b:e5:85:d3:6d:db:14:27:bc:8f:67:
0b:d6:77:44:12:14:3e:a8:94:fc:14:f9:8a:f2:06:85:39:1d:
0a:32:7d:07:91:1a:7c:16:59:55:21:46:ee:fb:89:4b:99:da:
c1:f8:28:e8:cb:a5:42:77:e4:02:8a:a5:fd:a2:e7:a9:23:d5:
01:a7:42:59:c2:28:ad:8a:b9:ee:6f:4a:88:2a:41:b1:ca:2f:
07:ec:7e:10:4b:67:c0:5d:93:6d:63:0d:70:3d:f0:8d:39:b5:
28:44:de:5d:4f:77:a7:d3:05:38:94:73:e2:eb:e3:eb:bf:66:
08:63:94:03:49:9b:4b:fd:1a:88:47:a7:79:0f:35:4c:d0:36:
9f:bd:be:60:ff:4b:cb:fc:11:68:f0:56:14:33:b3:86:a0:ea:
38:a4:bf:de:e5:41:2b:bb:fd:57:7b:37:5e:f1:c6:c1:38:dc:
35:56:4c:26:52:27:56:35:b5:ac:65:ee:3e:10:3b:ee:48:a2:
2b:ed:da:8a:26:b3:e7:1a:d5:92:c0:2c:f7:59:43:bb:35:d0:
cc:12:6f:83:02:b6:4c:f4:83:72:d2:38:5a:17:f8:32:25:f8:
17:e7:e4:23:d5:45:2f:99:07:32:0f:40:f8:ee:82:a3:b1:ed:
ef:3c:8f:0e
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIDAcIaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzAxMTY0MDU2WhcNMjYwODAxMTY0MDU2WjAYMRYw
FAYDVQQDEw02YTQ1NDMxZS01NTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0jzxhZdTBeLlx3EOBGJijvMthzJgcK/daA6+b0H8SOmxu3N4bW99DFv6
IK2KRXLTZe/4hEbCscjAfnRzVisXVmfoJLqlo6Qko55k+Uow+1ajRVcVp6fXTyaX
ilBLqO8gpRbN+JvWij3gNWK7UKBx5AUrYFS+J12IaFTtXF8cuA6qLHYL3r5kS1+d
xaDjxqmTAVRv3nbT+BTxfgOBSO2i3cz3Hfd24/GUwo1Zkh5OYXrI3lXNV1Pg9r4B
GaQEVyLrV3GAgDu/1FEs9X+2LiK89bptIrez2HxBdC0KNE+OreEqhsZoZGXkRP+K
nA9s3iKF8FqH6VhFAmuMVqhzWTXfYwIDAQABo4ICzDCCAsgwHQYDVR0OBBYEFPeE
9rEGhSahTiFo+CZxjOrhMvCFMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BNTAyQ0NCQzc1NkIxMUYxQjhDNzhBMUVDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCnOYQAwQCnOY0AwQBnOaGAwQB
nOgCAwQDnOgwAwQAnPm9AwQBnPnCAwQBnPnIMA0GCSqGSIb3DQEBCwUAA4IBAQCt
C6icUSH5a+WF023bFCe8j2cL1ndEEhQ+qJT8FPmK8gaFOR0KMn0HkRp8FllVIUbu
+4lLmdrB+Cjoy6VCd+QCiqX9ouepI9UBp0JZwiitirnub0qIKkGxyi8H7H4QS2fA
XZNtYw1wPfCNObUoRN5dT3en0wU4lHPi6+Prv2YIY5QDSZtL/RqIR6d5DzVM0Daf
vb5g/0vL/BFo8FYUM7OGoOo4pL/e5UEru/1Xezde8cbBONw1VkwmUidWNbWsZe4+
EDvuSKIr7dqKJrPnGtWSwCz3WUO7NdDMEm+DArZM9INy0jhaF/gyJfgX5+Qj1UUv
mQcyD0D47oKjse3vPI8O
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:57 2026 by rpki-client